Report a security issue

How to report

• Describe the issue and what an attacker could do with it.
• Give the steps to reproduce it, and the product and version affected.
• Include only the personal information needed to show the issue.
• Keep the issue private until we have had a reasonable time to fix it.

We reply to confirm we have your report and keep you informed while we investigate. For anything else, contact [email protected].

Good-faith research

We welcome research done in good faith. Test only accounts, Cores and equipment you own or are allowed to test. Never operate doors, locks or other equipment at a venue that is not yours, and never test while players are in a room. Do not access, change or delete other people’s data, and do not degrade the service for others. If you follow these rules and report what you find to us first, we will not take legal action against you for that research.

No bounty

We do not run a bug bounty programme and do not pay for reports.